@indigoai-us/hq-cli 5.192.1 → 5.192.2

package/CHANGELOG.md

@@ -2,6 +2,17 @@
 
 ## [Unreleased]
 
+## [5.192.2] — 2026-09-25
+
+### Fixed
+
+- Create, resume, automatic repair, and apply now read
+  `lanes.claude-account-balance` from hq-flags. `HQ_FLAG_*` remains the local
+  override, and a registry read failure keeps the gate off. The
+  `accounts balance --json` report includes `balance_gate_enabled`.
+- `hq lanes accounts balance --apply` now honors each lane's company-scoped
+  gate, skips disabled company lanes, and rechecks the gate before moving.
+
 ## [5.192.1] — 2026-09-25
 
 ### Fixed

package/dist/commands/lanes.d.ts

@@ -86,8 +86,8 @@ export interface LanesCommandDeps {
     isSsmOwnerDispatch?: () => boolean;
     /** Test seam for changing a lane between pre-lock and locked grant reads. */
     withGrantHireLocks?: typeof withLaneHireLocks;
-    /** Test seam for the default-off Claude account-balancing gate. */
-    laneClaudeAccountBalanceEnabled?: () => boolean;
+    /** Test seam for the Claude account-balancing gate. */
+    laneClaudeAccountBalanceEnabled?: (company?: LaneCompanyRef | null) => boolean | Promise<boolean>;
 }
 export declare const LANE_OUTPOST_LOAD_BALANCING_FLAG = "lanes.outpost-load-balancing";
 export declare function parseSeniorRef(raw: string): SeniorRef;

package/dist/commands/lanes.js

@@ -57,8 +57,10 @@ export const LANE_OUTPOST_LOAD_BALANCING_FLAG = "lanes.outpost-load-balancing";
 function defaultLanePlacementEnabled() {
     return resolveProcessFlagGate(LANE_OUTPOST_LOAD_BALANCING_FLAG, { fallback: false }, () => false);
 }
-function defaultLaneClaudeAccountBalanceEnabled() {
-    return resolveProcessFlagGate(CLAUDE_ACCOUNT_BALANCE_FLAG, { fallback: false }, () => false);
+function defaultLaneClaudeAccountBalanceEnabled(company) {
+    // Keep the local HQ_FLAG override and the registry reader's fail-closed
+    // behavior, matching the lane hire-grants gate.
+    return readLanesRegistryFlag(CLAUDE_ACCOUNT_BALANCE_FLAG, { company });
 }
 function defaultLaneHireGrantsEnabled(company) {
     return readLanesRegistryFlag(LANE_HIRE_GRANTS_FLAG, { company });
@@ -2516,7 +2518,7 @@ async function runCreate(ctx, opts) {
     }
     const allowedAccounts = validatedAccounts.size > 0 ? [...validatedAccounts] : profileAccounts;
     let accountSelection;
-    if (provider === "claude" && ctx.laneClaudeAccountBalanceEnabled()) {
+    if (provider === "claude" && await ctx.laneClaudeAccountBalanceEnabled(company)) {
         const targetHost = placementHostOverride ?? (outpostId !== undefined
             ? { kind: "outpost", id: outpostId }
             : laneHostFromCtx(ctx));
@@ -4841,7 +4843,7 @@ async function prepareAccountMove(ctx, lane, input) {
 async function selectAutomaticClaudeResumeAccount(ctx, lane) {
     if (lane.provider !== "claude")
         return undefined;
-    if (!ctx.laneClaudeAccountBalanceEnabled()) {
+    if (!await ctx.laneClaudeAccountBalanceEnabled(lane.company)) {
         if (lane.account === undefined)
             return undefined;
         const config = loadLanesConfig(ctx.hqRoot());
@@ -5245,6 +5247,7 @@ async function applyClaudeBalanceMove(ctx, suggestion) {
         return { lane_id: suggestion.lane_id, host: suggestion.host, from: suggestion.from, to: suggestion.to, state: suggestion.state };
     }
     const lane = laneWithRecoveredProviderSession(ctx.hqRoot(), readLane(ctx.hqRoot(), suggestion.lane_id));
+    assertBalanceApplyEnabled(await ctx.laneClaudeAccountBalanceEnabled(lane.company));
     if (lane.state === "running") {
         throw new LanesError("lane_running", `Lane ${lane.lane_id} is running; balance never moves a running turn`, {
             lane_id: lane.lane_id,
@@ -5273,8 +5276,8 @@ async function applyClaudeBalanceMove(ctx, suggestion) {
     return { lane_id: moved.lane.lane_id, host: moved.lane.host, from: moved.from ?? suggestion.from, to: moved.to, state: moved.lane.state };
 }
 async function runClaudeBalanceMoveTarget(ctx, laneId, opts) {
-    assertBalanceApplyEnabled(ctx.laneClaudeAccountBalanceEnabled());
     const lane = laneWithRecoveredProviderSession(ctx.hqRoot(), readLane(ctx.hqRoot(), laneId));
+    assertBalanceApplyEnabled(await ctx.laneClaudeAccountBalanceEnabled(lane.company));
     assertLaneRunsHereForOperatorMutation(ctx, lane, "balance-move-target");
     if (lane.provider !== "claude") {
         throw new LanesError("claude_account_balance_provider_mismatch", `Lane ${laneId} does not use Claude`, {
@@ -6873,11 +6876,30 @@ async function runAccountsBalance(ctx, opts) {
             accepted: ["claude"],
         });
     }
-    if (opts.apply)
-        assertBalanceApplyEnabled(ctx.laneClaudeAccountBalanceEnabled());
     const hqRoot = ctx.hqRoot();
     const config = loadLanesConfig(hqRoot);
     const loaded = await loadClaudeBalanceHostSnapshots(ctx, hqRoot, config);
+    const laneBalanceGateEnabled = new Map();
+    const companyBalanceGateEnabled = new Map();
+    const lanes = loaded.snapshots.flatMap((host) => host.lanes);
+    for (const lane of lanes) {
+        const companyKey = JSON.stringify([lane.company?.uid ?? null, lane.company?.slug ?? null]);
+        let enabled = companyBalanceGateEnabled.get(companyKey);
+        if (enabled === undefined) {
+            enabled = await ctx.laneClaudeAccountBalanceEnabled(lane.company);
+            companyBalanceGateEnabled.set(companyKey, enabled);
+        }
+        laneBalanceGateEnabled.set(lane.lane_id, enabled);
+    }
+    // With no lanes there is no tenant scope to resolve, so report and enforce
+    // the unscoped/default gate. Otherwise the report reflects whether any
+    // represented lane company has the gate enabled.
+    if (lanes.length === 0) {
+        companyBalanceGateEnabled.set(JSON.stringify([null, null]), await ctx.laneClaudeAccountBalanceEnabled());
+    }
+    const balanceGateEnabled = [...companyBalanceGateEnabled.values()].some(Boolean);
+    if (opts.apply)
+        assertBalanceApplyEnabled(balanceGateEnabled);
     const loads = accountLoadsForReport({ hosts: loaded.snapshots, config });
     const suggestions = planClaudeBalanceMoves({ hosts: loaded.snapshots, config });
     const selections = loaded.snapshots.map((host) => {
@@ -6939,6 +6961,16 @@ async function runAccountsBalance(ctx, opts) {
                 });
                 continue;
             }
+            if (laneBalanceGateEnabled.get(suggestion.lane_id) !== true) {
+                skipped.push({
+                    lane_id: suggestion.lane_id,
+                    host: suggestion.host,
+                    from: suggestion.from,
+                    to: suggestion.to,
+                    reason: "claude_account_balance_disabled",
+                });
+                continue;
+            }
             try {
                 moved.push(await applyClaudeBalanceMove(ctx, suggestion));
             }
@@ -6957,6 +6989,7 @@ async function runAccountsBalance(ctx, opts) {
         ok: true,
         action: "accounts.balance",
         provider: "claude",
+        balance_gate_enabled: balanceGateEnabled,
         accounts,
         selections,
         unavailable_hosts: loaded.unavailableHosts,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigoai-us/hq-cli",
-  "version": "5.192.1",
+  "version": "5.192.2",
   "description": "HQ by Indigo management CLI — modules and cloud sync",
   "main": "dist/index.js",
   "bin": {